jeecgboot JeecgBoot

• CVE-2026-112017 Medium 6.5 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass 0.3%
• CVE-2026-108891 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId 0.2%
• CVE-2026-108888 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls 0.2%
• CVE-2026-108887 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls 0.2%
• CVE-2026-108886 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername 0.2%
• CVE-2026-108885 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete 0.2%
• CVE-2026-108884 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint 0.2%
• CVE-2026-108883 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig 0.2%
• CVE-2026-108882 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser 0.2%
• CVE-2026-108881 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo 0.2%
• CVE-2026-108880 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId 0.2%
• CVE-2026-108879 Medium 4.3 JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter 0.2%
• CVE-2026-108878 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById 0.2%
• CVE-2026-108877 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete 0.2%
• CVE-2026-108876 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit 0.2%
• CVE-2026-108875 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup 0.2%
• CVE-2026-108874 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson 0.2%
• CVE-2026-108873 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo 0.2%
• CVE-2026-108872 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers 0.2%
• CVE-2026-108871 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule 0.2%
• CVE-2026-108870 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule 0.2%
• CVE-2026-108869 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement 0.2%
• CVE-2026-108868 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement 0.2%
• CVE-2026-108867 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById 0.2%
• CVE-2026-108866 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths 0.2%
• CVE-2026-108680 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement 0.2%
• CVE-2026-108679 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement 0.2%
• CVE-2026-108678 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles 0.2%
• CVE-2026-108677 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName 0.2%
• CVE-2026-108676 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles 0.2%
• CVE-2026-108675 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop 0.2%
• CVE-2026-108674 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById 0.2%
• CVE-2026-108673 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls 0.2%
• CVE-2026-108672 Medium 4.3 JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser 0.2%
• CVE-2026-108671 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById 0.3%
• CVE-2026-108670 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment 0.2%
• CVE-2026-108669 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search 0.2%
• CVE-2026-108668 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin 0.2%
• CVE-2026-108667 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin 0.2%
• CVE-2026-108666 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch 0.2%
• CVE-2026-108665 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit 0.2%
• CVE-2026-108664 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById 0.2%
• CVE-2026-108663 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply 0.2%
• CVE-2026-108662 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser 0.2%
• CVE-2026-108661 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant 0.2%
• CVE-2026-108660 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus 0.2%
• CVE-2026-108659 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId 0.2%
• CVE-2026-108658 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo 0.2%
• CVE-2026-108657 High 8.1 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply 0.2%
• CVE-2026-108656 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint 0.2%